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• A Costa Rican company agreed to plead guilty in court in Virginia to a $670 million global 
insurance fraud scheme. - Associated Press (See item 11 ) 

• More than 160,000 bridges in the United States are either structurally deficient or 
functionally obsolete, according to a new report by a national civil engineers’ group. - 
Homeland Security News Wire (See item 14 ) 

• Contrary to recent reports, the Flashback botnet that mounted the first ever successful 
malware attack against Apple’s OS X is growing. The infection count was estimated to be 
650,000 machines as of April 20. - Computerworld (See item 43 ) 

• After two deadly booby traps were discovered by a U.S. Forest Service officer along a 
popular walking trail in Provo Canyon in Utah, two men were taken into custody. - 
NewsCore (See item 51 ) 
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Energy Sector 



Current Electricity Sector Threat Alert Levels: Physical: LOW, Cyber: LOW 

Scale: LOW, GUARDED, ELEVATED, HIGH, SEVERE [Source: ISAC for the Electricity Sector (ES-ISAC) - 
rhttp://www.esisac.coml 



1. April 23, Reuters - (National) Winter returns with a blast as snow pounds U.S. 
Northeast. A snowstorm struck a wide area of the Northeast April 23, raising the threat 
of downed trees and hazardous roads and causing scattered power outages in several 
states. The National Weather Service issued winter storm warnings from West Virginia 
northward into western New York. As much as a foot of snow was forecast for higher 
elevations of western Pennsylvania. About 57,000 power outages were reported 
scattered across several states from Kentucky to Maine, with most of them in 
Pennsylvania and upstate New York. Portions of southern New England continued to 
receive soaking rain as strong winds picked up along the coast, prompting a flood 
advisory for the area. Winds of up to 50 miles per hour were expected in some areas, 
the service said on its Web site. 

Source: http://www.orlandosentinel.com/news/nationwoiid/sns-rt-us-usa-weather- 
northeastbre83108z-20120422,0,7491536.story 

2. April 22, WHIO 7 Dayton - (Ohio) Last flames put out from massive oil blaze. The 
last, lingering flames leftover from a massive fire at a Clark County, Ohio oil company 
were completely extinguished April 21. The Pike Township fire chief said the last flare 
up at the R.D. Holder Oil Company happened April 21, and all fire crews cleared the 
scene. Ohio Environmental Protection Agency (EPA) workers and private contractors 
were still removing hazardous chemicals from the site April 22. The fire erupted April 

1 9 as workers transferred liquid fuel into a tanker. Officials believe the fire started from 
a spark of static electricity. Fifty agencies worked 6 hours to get the fire under control, 
using water and foam. Ohio EPA officials said the water caused a runoff of oil and 
debris to flow into surrounding waterways. Oil runoff was found in an unnamed 
tributary of Donnels Creek which runs behind R.D. Holder. Veolia Environmental 
Services of Dayton cleaned up the oil, set up booms in the water, and dug a trench off 
the waterway to intercept any additional oil or runoff. The oil company supplies diesel 
fuel, heating oil, gasoline, Dragon racing fuel, biodiesels, and lubricants, although the 
owner said they only had lubricants at the scene. 

Source: http://www.whiotv.com/news/news/local/Last-flames-put-out-from-massive- 
oil-blaze/nMfKD/ 



3. April 20, Reuters - (Texas) BP says Texas City hydrocracker shut by storm. A 
hydrocracking unit was shut by a lightning strike April 20 at BP’s Texas City, Texas 
refinery, a company spokesman said. The shutdown of the hydrocracker triggered a fire 
in a pipe flange on the unit. The fire was brought under control by the refinery’s fire- 
fighting unit, a BP spokesman said. There were no injuries reported due to the fire. A 
hydrocracker uses hydrogen to increase the production of motor fuel from a barrel of 
crude oil. 

Source: http://www.reuters.com/article/2012/04/21/us-refinerv-operations-bp-texascity- 
idUSBRE83J 1 NJ20 1 2042 1 
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4. April 20, Minneapolis Star Tribune - (Minnesota) Minnesota ethanol plant fined 
$800,000. A Minnesota ethanol plant has been fined an $800,000 pollution penalty, the 
latest in a multi-year regulatory crackdown that state officials said appears to be 
changing the industry’s ways. Bushmills Ethanol Inc. of Atwater, Minnesota, was fined 
for illegally discharging salt-laden wastewater into a ditch and then lying about it, the 
state pollution control agency said April 20. It is the third-highest penalty against a 
Minnesota ethanol producer in 6 years, a period when 13 of the state’s 21 plants were 
caught polluting the air or waterways, and sometimes both. Altogether the penalties 
have exceeded $5.1 million. 

Source: http://www.startribune.com/local/148254385.html 
For another story, see item 19 



[ Return to top ] 

Chemical Industry Sector 

5. April 23, Baltimore Sun - (Maryland) Cause of 3-alarm warehouse fire in Canton 
still to be determined. The cause of an April 22 chemical warehouse fire in Baltimore 
that forced the evacuation of dozens of homes was still to be determined the morning of 
April 23 because unsafe conditions prevented an investigation. Officials from the 
Maryland Department for the Environment (MDE) and a building inspector were 
expected on the site at Eastern Plating Co., which makes chemicals used in the defense, 
aerospace, and medical industries, April 23, a Baltimore fire spokesman said. The 
warehouse is in the Canton neighborhood. The MDE was needed to help HAZMAT 
crews evaluate the integrity of tanks containing hazardous chemicals, the spokesman 
said. Nearly 90 firefighters battled the three-alarm blaze, bringing it under control 
around midnight. A few crews remained April 23, wetting the embers to prevent the 
fire from reigniting. Heavy smoke caused officials to evacuate 60 people the night of 
April 22 for about 2 hours. Power was out in the immediate area for several hours, but 
had been mostly restored by the morning of April 23. The fire spokesman said he 
expects the building to be demolished. Multiple areas of the building collapsed in the 
fire, he said. 

Source: http://www.baltimoresun.com/news/breaking/bs-md-warehouse-fire-canton- 
201 20423,0,599 1476.storv 



6. April 23, KCRA 3 Sacramento - (California) Big rig spills sulfur near Yosemite 
entrance. Hazardous materials crews were cleaning up a highway sulfur spill near the 
entrance of Yosemite National Park in California, April 23. The California Highway 
Patrol said a big-rig started spilling 25-pound bags of powdered sulfur the night of 
April 22 on U.S. Route 41 near the Fish Camp section of Mariposa County and the 
entrance to Yosemite. The Fresno Bee said 600 bags of sulfur spilled on the highway, 
sparking several small fires that were extinguished. Highway 41 remained closed in the 
area as of early April 23, and agencies involved in the cleanup expected to have the 
highway and the Yosemite entrance open by noon. 

Source: http://www.kcra.eom/r/30940310/detail.html 
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For more stories, see items 19, 27 , 
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Nuclear Reactors, Materials and Waste Sector 

7. April 19, Newport Beach Patch - (California) San Onofre nuclear power plant leads 
nation in safety complaints. The San Onofre Nuclear Generating Station near San 
Diego continued to rank number one in the nation for both substantiated and 
unsubstantiated safety complaints at nuclear plants, according to figures from federal 
regulators, the Newport Beach Patch reported April 19. The number of substantiated 
safety allegations at San Onofre was more than six times the national average in 2011, 
a significant drop from its peak in 2010 when it was 15 times the average. But even 
with the decline, San Onofre was — for the third year in a row — the national leader in 
safety allegations substantiated by the U.S. Nuclear Regulatory Commission. 

Source: http://newportbeach.patch.com/articles/san-onofre-nuclear-power-plant-leads- 
nation-in-safetv-complaints-8cbf 1 1 8a 

T Return to top i 

Critical Manufacturing Sector 

8. April 19, Associated Press - (Mississippi) 500K in auto parts allegedly stolen from 
Nissan plant. Authorities said a raid on a car restoration business uncovered about 
$500,000 in parts that police believe were stolen from the Nissan North American plant 
in Canton, Mississippi, the Associated Press reported April 19. A Jackson police 
sergeant said authorities were acting on a tip when they raided Precious Automotive 
Auto Restoration in Jackson. Several crates of batteries and 10 boxes of catalytic 
converters, valued at $5,260 each, were among the items found. The shop owner was 
arrested on suspicion of receiving and possessing stolen goods. Two other employees 
were arrested on outstanding warrants. Investigators did not know how the parts were 
taken from the plant or how long the thefts have been going on. 

Source: 

http://www.wtok.com/news/headlines/Police 500K in Nissan plant parts recovered 
1481 04025 .html?ref=025 



For more stories, see items 5 and 27 



T Return to topi 



Defense Industrial Base Sector 

See item 5 
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Banking and Finance Sector 



9. April 23, Financial Crimes Enforcement Network - (National) FinCEN reports 
mortgage fraud SARs increased in 2011 even as fourth quarter level 
decreased. The Financial Crimes Enforcement Network (FinCEN) April 23 released its 
full year 2011 update of mortgage loan fraud reported suspicious activity reports (MLF 
SARs) that showed financial institutions submitted 92,028 MLF SARs in 201 1, a 31 
percent increase over the 70,472 submitted in 2010. The increase can primarily be 
attributable to mortgage repurchase demands. Financial institutions submitted 17,050 
MLF SARs in the 2011 fourth quarter, a 9 percent decrease in filings over the same 
period in 2010 when financial institutions filed 18,759 MLF SARs. The fourth quarter 
of 201 1 was the first time since the fourth quarter of 2010 when filings of MLF SARs 
had fallen from the previous year. FinCEN also updated its SAR data sets used in the 
report. 

Source: http://www.fincen.gov/news room/nr/html/20 120423.html 

10. April 22, KCEN 6 Temple - (Texas) Four Houston banks robbed within 4 
hours. Houston police officers along with the FBI searched for five bank robbery 
suspects April 21 after detectives said four banks were robbed in the span of 4 hours. 
“The first robbery took place around 1 1:05 a.m. at [a] Wells Fargo,” an FBI 
spokeswoman said. “Two men used weapons to threaten the employees and customers 
inside another Wells Fargo, which was robbed at 1 1:30 a.m. At the same time 8 miles 
away, a man stormed into a Compass Bank with a gun and pointed his weapon at the 
teller demanding cash, investigators said. According to officers he fired one shot before 
running out of the bank. The fourth robbery took place near the Galleria at a Chase 
Bank around 2:30 p.m. As a suspect was running away, the dye pack exploded in the 
parking lot, but the thief was able to get away on foot before police arrived. In all four 
cases the suspects got away with cash. 

Source: http ://w ww .kcentv .com/story/ 1 7 65 3492/four-houston-banks-robbed- within-4- 
hours 



11. April 21, Associated Press - (Virginia; International) Costa Rican firm pleading 
guilty in $670M scam. A Costa Rican company agreed to plead guilty to a $670 
million global insurance fraud scheme. Provident Capital Indemnity Ltd. entered a plea 
agreement April 20 in a U.S. district court in Richmond, Virginia, where its majority 
owner and president is scheduled for a jury trial starting April 23. He is charged with 
conspiracy, wire fraud, mail fraud, and money laundering. According to court papers, 
Provident agreed to plead guilty to a single count of mail and wire fraud conspiracy. A 
half-dozen mail fraud and wire fraud counts will be dropped. Provident sold bonds 
guaranteeing funding for life settlement companies, which buy life insurance policies 
from insured people at less than face value and collect the benefits when those people 
die. The government claimed Provident misled investors about its financial stability, its 
credit rating, and whether its financial statements had been audited. The U.S. Securities 
and Exchange Commission also filed a civil complaint against Provident in 201 1, and a 
judge froze the company’s assets and enjoined it from doing business. 

Source: http://www.businessweek.com/ap/2012-04/D9U9I0PQ0.htm 
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12. April 21, Reuters - (International) Italy police seize $5 billion of U.S. securities. Italy 
financial police have seized U.S. securities with face values of about $1.5 billion and 
gold certificates worth above $3.96 billion as part of an investigation into a possible 
international financial scam. The police said April 21 the “million dollar” operation 
was a last step in the probe, which centered on the use of bearer Federal Reserve debt 
securities dating back to the 1930s as a guarantee for loans or other opaque cross- 
border transactions. Rome police seized the securities from a man, who held them in a 
briefcase along with documents about financial operations, the police said in a 
statement. Police said they were carrying out checks, helped by the U.S. Central Bank 
and the U.S. embassy in Rome, over the authenticity and origin of the securities, as 
well as over possible links between the man and criminal organizations. 

Source: http://www.reuters.com/article/2012/04/21/us-italy-police-seize- 
idUSBRE83K08F20 120421 



13. April 20, KTVK 3 Phoenix; KASW Phoenix 6 - (Arizona) ‘Bearded Bandit’ wanted in 
7 bank robberies. Police have asked for information from the public in the Phoenix 
area as they continue to search for a bank robber dubbed the “Bearded Bandit.” The 
suspect robbed seven banks in the Phoenix metropolitan area between December 22 
and April 3, according to police. In each case, the suspect walked up to the tellers and 
demanded money then fled on foot with the cash. Police have described the suspect as a 
white male who has worn a fake beard and wig in the robberies. 

Source: http://www.azfamily.com/news/Bearded-Bandit-wanted-in-7-bank-robberies- 
148280855.html 



T Return to top ] 

Transportation Sector 

14. April 23, Homeland Security News Wire - (National) U.S. aging bridges in critical 
condition. There are an estimated 18,000 bridges in the United States which are classed 
as fracture-critical bridges, requiring continual inspections. Homeland Security News 
Wire reported April 23. The need for increased inspection and maintenance runs 
against shrinking state and federal budgets for infrastructure improvements. The 
American Society of Civil Engineers’ (ASCE) most recent report card gave the 
condition of bridges in the U.S. a grade of C. The ASCE notes 26 percent of U.S. 
bridges are either structurally deficient or functionally obsolete. They note that as of 
2008, the year of the most recent pre-report card survey, one in four bridges in rural 
areas was deficient, while one in three urban-area bridges are in the same class. Under 
ASCE definition, structurally deficient bridges, though not unsafe, must post speed and 
weight restrictions because of limited structural capacity. A functionally obsolete 
bridge, though not unsafe either, has older design features and geometries, and cannot 
accommodate current traffic volumes, vehicle sizes, and weights. 

Source: http://www.homelandsecuritvnewswire.com/dr20120423-u-s-aging-bridges-in- 
critical-condition 



15. April 23, Washington Post - (Maryland) Fatal crash causes major delays on 

Beltway. One person was killed and a second was injured April 23 in an accident on 
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the outer loop of the Capital Beltway in Silver Spring, Maryland. According to police, 
the crash involved multiple cars and a tractor trailer. One person was pronounced dead. 
A second person was taken to a local hospital, but police did not have details about the 
victim’s injuries or condition. Investigators shut down all lanes of 1-495 between 
Coles ville Road and Georgia Avenue for several hours. Lanes began reopening about 4 
hours later, but there were reports that heavy delays persisted. 

Source: http://www.washingtonpost.com/blogs/crime-scene/post/fatal-crash-causes- 
maior-delays-on-beltwav/2012/04/23/gIQAlmqebT blog.html 

16. April 23, Chattanooga Chattanoogan - (Tennessee) Passenger cited after TSA 
discovers loaded firearm at Chattanooga airport checkpoint. The Transportation 
Security Administration discovered a firearm at the checkpoint at Chattanooga 
Metropolitan Airport in Chattanooga, Tennessee, April 20. A loaded .32 Beretta was 
discovered in a passenger’s carry-on bag. Airport police were alerted, took possession 
of the bag and cited the passenger. The gun was the first firearm discovered at 
Chattanooga airport in 2012. There were four firearms discovered in 2011. 

Source: http://www.chattanoogan.com/2012/4/23/224480/Passenger-Cited-After-TSA- 
Discovers.aspx 

17. April 21, Associated Press - (California) Would-be LA-area plane-jacker thwarted 
by chains. Authorities said an armed man tried to steal a small plane from a Los 
Angeles County airport, but his flight was foiled by a chain connecting the aircraft to 
the tarmac, the Associated Press reported April 21. A sheriff’s statement said the man 
attempted to steal the two-seat Cessna 152 April 20 from Compton/Woodley Airport in 
Compton, California, where he was a student pilot. Airport employees said he entered 
the airport office and began taking keys for airplanes, then pulled a gun on them when 
they tried to stop him. He was turned over to FBI officials, who booked him on 
suspicion of aircraft piracy. 

Source: http://www.foxnews.com/us/2012/04/21/would-be-la-area-plane-jacker- 
thwarted-by-chains/ 



For another story, see item 6 



T Return to top ] 

Postal and Shipping Sector 

18. April 23, Associated Press - (Massachusets; International) UPS flight en route to 
Germany diverted to Logan. A UPS cargo plane en route to Germany was diverted to 
Logan International Airport in Boston after a warning sensor indicated smoke on the 
plane, the Associated Press reported April 23. A Logan Airport spokesman said the 
flight originated in Philadelphia and was headed to Cologne, Germany, before it was 
diverted April 22. A UPS spokesman said airport crews inspected the Boeing 767 and 
could find no evidence of any fire. The spokesman said it was possible the sensor 
malfunctioned. 

Source: http ://w w w .timesonline .com/news/state/ups-fli ght-en-route-to- german y- 
di verted-to-lo gan/article 95f2d544-462f-56d8-8251-050892360a0d.html 
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Agriculture and Food Sector 

19. April 22, Associated Press - (Louisiana) Bayou Verdine cleanup to begin in 
August. The U.S. Environmental Protection Agency (EPA) said it will begin cleaning 
up a nearly 3-mile portion of Bayou Verdine, in Lake Charles, Louisiana, in August, 
one of the Calcasieu estuary’s dirtiest waterways. The Lake Charles American Press 
reported the project will dredge and remove hazardous chemicals and debris from the 
bayou that federal and state scientists said originated at a refinery and industrial plant. 
The substances settled into the water bed, contaminating fisheries and wildlife. 
HAZMAT workers will dredge contaminated soil and then pump water and waterbed to 
a nearby pond. Eventually, the secured pond will be covered. Collected natural and 
man-made debris will be sent to a landfill. EPA officials intend to have the project 
completed by 2015. After the final phase of work is completed, the two companies 
responsible for exceeding chemical discharges, ConocoPhillips and Sasol North 
America, will have spent $28 million in fines and hazardous waste removal. 

Source: 

http://www.shreveporttimes.com/article/DG/20120423/NEWS01/204230312/Bavou- 

Verdine-cleanup-begin-August?odyssev=navlhead 

20. April 21, Food Safety News - (Missouri) 15 ill with E. coli in Missouri, multiple 
sources possible. Il lnesses in the E. coli 0157:H7 outbreak in central Missouri rose to 
15 April 20, suggesting the infections may come from multiple sources. Of the 15 
cases, seven individuals reported consuming raw milk products from a single dairy in 
Howard County. Six of the seven match by their identifiable genetic pattern known as a 
pulsed-field gel electrophoresis (PFGE). Of the other eight illnesses, the people who 
did not report consuming raw milk products, only one individual has a PFGE pattern 
matching the raw milk drinkers. The other 7 infections vary genetically or did not 
return a PFGE reading. The newest case in the outbreak is a child under 18 from Boone 
County who was hospitalized but was released. A 2-year-old from Boone County was 
hospitalized for more than 2 weeks after developing symptoms of hemolytic uremic 
syndrome. The 15 illnesses are spread across Boone, Camden, Clarke, Cooper, 

Howard, and Jackson counties. 

Source: http://www.foodsafetvnews.com/2012/04/15-ill-with-e-coli-in-missouri- 
multiple-sources-possible/ 

21 .April 21, Food Safety News - (Oregon) 19 ill with E. coli in Oregon raw milk 

outbreak. Another person in Oregon became ill after an E. coli outbreak was traced to 
raw milk from Foundation Farm near Wilsonville, according to a April 20 news release 
from the public health division of the state’s health authority. Of the 19 total cases, 11 
have culture-confirmed E. coli 0157 infections. Fifteen of the cases are children 19 or 
younger, four of the children were hospitalized with kidney failure. According to a 
member of the cowshare implicated in the outbreak, as many as four of the farmer’s 
children are also sickened, including one with hemolytic uremic syndrome. 

Source: http://www.foodsafetynews.com/2012/04/post-5/ 
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22. April 21, Food Safety News - (National) Sushi salmonella outbreak total rises to 160 
confirmed cases. Nineteen more cases of Salmonella Bareilly infection were 
confirmed in the multistate outbreak linked to sushi tuna. At least 160 people in 20 
states and Washington, D.C. have been sickened, the Centers for Disease Control and 
Prevention (CDC) reported April 20. The CDC said the outbreak is likely much larger, 
estimating that for every case of salmonellosis, 38.6 go unreported. That would 
translate to about 6,176 people ill from eating tainted tuna. The implicated frozen raw 
yellowfin tuna product was imported from India and was recalled by the California- 
based distributor, Moon Marine USA. According to the CDC’s latest update, the 19 
new outbreak cases include 14 reported by Massachusetts, 2 reported by New York, 
and 1 each reported by Illinois, North Carolina, and Virginia. The ill people range in 
age from 4 to 78 years, and 66 percent are female. At least 26 have been hospitalized. 
Source: http://www.foodsafetvnews.com/2012/04/sushi-salmonella-outbreak-total- 
rises-to- 160-cases/ 



23. April 21, Food Safety News - (Colorado) Allergen alert: Bratwurst with egg. Old 
Style Sausage of Denver, Colorado, recalled 3,000 pounds of bratwurst distributed to 
restaurants in the state because the sausage contains egg, an allergen not declared on 
the package label. The problem was discovered during a routine food safety assessment 
and may have occurred as a result of a change in ingredient formulation, according to 
the recall alert. The recalled sausages do not have a packaging date or code but may 
bear a label with the establishment number EST. 8126 inside the U.S. Department of 
Agriculture mark of inspection. 

Source: http://www.foodsafetynews.com/2012/04/allergen-alert-bratwurst-with-egg/ 

24. April 21, Food Safety News - (Michigan; Indiana) Listeria test leads to pizza calzone 
recall. Albie’s Foods of Gaylord, Michigan recalled 311 pounds of pizza calzone due 
to possible contamination with Listeria monocytogenes, the U.S. Department of 
Agriculture’s (USDA) Food Safety and Inspection Service (FSIS) announced April 20. 
The problem was discovered during routine FSIS testing. There were no reports of 
illnesses associated with the calzone produced April 10, and shipped to institutions in 
Indiana and Michigan. The recall is for packages containing 48 4.5-oz. pieces of 
“Albie’s Pizza Calzone” bearing the establishment number EST. 10100 inside the 
USDA mark of inspection. 

Source: http://www.foodsafetynews.com/2012/Q4/listeria-test-leads-to-pizza-calzone- 
recall/ 

25. April 21, Airzona Republic - (Arizona) Phoenix bagel shop employees treated for 
carbon monoxide. A north Phoenix bagel shop was evacuated and seven employees 
were treated for carbon monoxide poisoning April 21. A spokesman for the Phoenix 
Fire Department said the Einstein Bros. Bagel was closed due to a leak found in the 
hood of a stove. At the time of the evacuation, five employees had symptoms of carbon 
monoxide poisoning and three were sent to the hospital, however, all were in stable 
condition, he said. 

Source: http://tucsoncitizen.com/arizona-news/2012/Q4/21/phoenix-bagel-shop- 
employees-treated-for-carbon-monoxide/ 
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26. April 20, WTVF 5 Nashville - (Tennessee) State officials warn of tainted 

potatoes. Tennessee officials issued a warning to Nashville residents April 20 about 
possible tainted potatoes. A fiery crash on Interstate 24 April 18 sent 40,000 pounds of 
potatoes rolling from the back of a tractor trailer. The spuds were exposed to smoke, 
flames, fire retardant, and possibly other chemicals as fire crews worked to put out the 
blaze. The potatoes were reportedly dumped on a private lot to await a trip to the 
landfill, but have since disappeared. State agriculture and health officials received 
reports that north Nashville residents may have received some of the tainted potatoes. 
The potatoes were labeled as Dole brand Russet potatoes and packaged in 10-pound 
poly bags. 

Source: http://www.newschannel5.com/storv/17630236/state-officials-wam-of-tainted- 
potatoes 

For another story, see item 52 
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Water Sector 



27. April 23, Associated Press - (Wisconsin) Wisconsin DNR way behind on lake 
permits. Wisconsin is not fully enforcing the strict phosphorus limits adopted 2 years 
ago to reduce algae blooms that turn many of the state’s lakes green and can make 
people sick, the Wausau Daily Herald reported April 22. The lack of enforcement 
comes despite alarm expressed by the Wisconsin Department of Natural Resources 
(DNR) secretary over conditions in at least one lake. In 2010, the legislature approved 
the limits, aimed at wastewater treatment plants, paper mills, and factories. As of the 
week of April 16, only 19 permits had been issued since September 2010 under the 
limits. The DNR still is evaluating applications from 201 municipal facilities and 155 
industrial facilities, and hundreds more must apply in the coming years. 

Source: http://www.thonline.com/news/iowa-illinois-wisconsin/article 4565bb8f-446d- 
5cd8-9326-2914a21aab7e.html 



28. April 22, Fairbanks Daily News-Miner - (Alaska) Water leak drains Minto 

reservoir, forces residents to conserve until pumps replenish supply. Residents in 
the village of Minto, Alaska, 130 miles north of Fairbanks, have been rationing water 
for 2 weeks because the village’s 3 wells can not produce enough water to satisfy the 
demand of the village’s approximately 250 residents, the Fairbanks Daily News-Miner 
reported April 22. The village has a 150,000-gallon water storage tank that serves as a 
reservoir for the water and sewer system, but an undetected break in the main water 
line earlier this winter resulted in the loss of a lot of water. The three wells the village 
pumps water from to fill the tank have not been able to replenish the supply adequately, 
the village chief said. “The water table is not producing water fast enough for what we 
need because the ground is still frozen,” she added. The village’s water supply got so 
low the week of April 16 that the village paid to have more than 15,000 gallons of 
water trucked in by a water company from Fairbanks. The village council asked 
residents to conserve water by not drinking from faucets, not doing laundry, and 
flushing toilets only when necessary. The village is seeking funding to drill a new well, 
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the village chief said. 

Source: 

http://www.therepublic.com/view/storv/ee0d99elb060411b8f3609b5077303f9/AK— 
Minto- W ater-Shortage/ 

29. April 20, KIVI 6 Boise - (Idaho) CJ Strike drinking water free of E. coli, now 
turned back on for first time since August 2010. The drinking water system at the 
Cove Recreation site of CJ Strike near Bruneau, Idaho, has been turned off since 
August 2010 due to presence of E. coli. The Bureau of Land Management (BLM) 
announced that the 13,000-gallon water tank was cleaned and turned back on April 16. 
Approximately 1,000 hours was invested by the BLM in reestablishing public drinking 
water at the Cove Recreation Site, since it was turned off. 

Source: http://www.kivitv.com/news/local/148283985.html 

Lor more stories, see items 2 and 19 
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Public Health and Healthcare Sector 



30. April 21, Union Daily Times - (South Carolina) S.C. man claims bomb brought to 
hospital by mistake. A man arrested after being found with a bomb in his hospital 
room at Wallace Thomson Hospital told the Union County, South Carolina, sheriff 
April 19 he meant no harm and had brought the bomb with him by mistake. He was 
arrested April 13 after nurses and security personnel found a homemade bomb in a bag 
he brought with him to the hospital 2 days earlier. The bomb was described as being a 
small glass bottle containing gunpowder with some ki nd of sealant on top. There was 
also a firework fuse that had been removed from the bottle by the time deputies arrived 
on the scene. While small in size, the sheriff said had the bomb been detonated, it 
would have destroyed the entire third floor of the hospital because of the oxygen 
systems in use. Shortly after he was arrested, the man told deputies he had several pipe 
bombs at his home. The ensuing search turned up seven pipe bombs in a bedroom 
dresser drawer, part of them metal pipes and the rest PVC pipe. While he told deputies 
about the bombs at his house, he was otherwise uncooperative with investigators, 
refusing to say why he brought the bomb to the hospital or made it and the others in the 
first place. 

Source: http://www.uniondailytimes.com/pages/full story/push?article- 
Man+claims+bomb+brought+to+hospital+by+mistake%20&id=l 83 11132 

31. April 20, Global Security New swire - (National) WMD treatment development poses 
significant challenges, GAO says. There are many obstacles to development of 
medical countermeasures that can be used to treat victims of a weapons of mass 
destruction (WMD) attack, including the high rate of failure in efforts to put treatments 
on the market, the U.S. Government Accountability Office (GAO) said in a report 
issued the week of April 16. There are “few” accessible vaccines and other drugs that 
could be used to aid people exposed to chemical, biological, radiological, or nuclear 
agent, the study said. “The failure rate for development and licensure of most drugs, 
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vaccines, and diagnostic devices can be more than 80 percent, depending on the stage 
of scientific research and development,” the agency said. “Given this risk, as well as a 
lack of a commercial market for most medical countermeasures, attracting large, 
experienced pharmaceutical firms to research and develop them is challenging.” The 
GAO report also noted the need to ensure the effectiveness of treatments without 
actually exposing humans to WMD agents in testing; difficulties in establishing the 
correct dosage for children; and assessing the “safety and effectiveness” of unlicensed 
drugs that might be authorized for use during a health crisis. “Finally, HHS faces the 
logistical challenge of ongoing replenishment of expiring medical countermeasures in 
the U.S. Strategic National Stockpile, the national repository of medications, medical 
supplies, and equipment for public health emergencies,” according to GAO findings. 
Source: http://www.nti.org/gsn/article/wmd-treatment-development-poses-significant- 
challenges-gao-says/ 

For more stories, see items 5 and 36 
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Government Facilities Sector 



32. April 23, KMOV 4 St. Louis - (Missouri) Explosive device thrown at federal building 
in downtown St. Louis. Federal officials are investigating after someone threw an 
explosive device at the Robert A. Young federal building in downtown St. Louis, 
Missouri, April 23, authorities said. The building the device was thrown at houses 
several government agencies, including Homeland Security, Housing and Urban 
Development, the U.S. Coast Guard, and the U.S. Army Corps of Engineers. According 
to authorities, the device landed on the sidewalk outside the building and exploded. No 
injuries were reported and there was very little damage done. According to reports, a 
witness saw the male suspect who threw the device. The witness pursued the man, but 
he got into a gray Chevy Camaro with Illinois license plates and took off. The vehicle 
is described as a 1990’ s model with no hubcaps and partial license “N50.” 

Source: http://www.kmov.com/news/local/Explosive-device-thrown-at-federal- 
building- in-do wntown-St-Louis- 1 48487785 .html 

33. April 22, Pittsburgh Tribune -Review - (Pennsylvania) Pitt to restrict final exams to 
five buildings on campus. The University of Pittsburgh (Pitt) in Pittsburgh will restrict 
final exams to five buildings, according to security measures announced April 22 in 
response to bomb threats that have plagued the school since mid-February. The 
university provost and senior vice chancellor said in a letter to students, faculty, and 
staff that final exams would be administered only in Alumni Hall, Benedum Hall, the 
Cathedral of Learning, Chevron Science Center, and David Lawrence Hall. She said 
police would sweep each building for explosives April 22 and before the beginning of 
each exam day, and the security presence would be increased during exams that start 
April 23, and when they are unoccupied. People will need a Pitt ID to enter the 
buildings, and their bags will be checked. Should a threat be made involving one of the 
buildings, the building will be combed for explosives but evacuated “only if it is 
determined that there is an imminent threat.” Likewise, officials said residence halls 
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also would be swept for explosives every evening starting April 22, and access to the 
buildings will be restricted to people with a Pitt ID. 

Source: http://www.pittsburghlive.eom/x/pittsburghtrib/news/breaking/s 792452.html 

34. April 21, V3.co.uk- (International) Hackers targeting governments with hijacked 
sites. Malicious code planted within compromised Wed pages has become the latest 
method for attackers targeting government organizations, according to research from 
security firm Zscaler, V3.co.uk reported April 21. The firm discovered many 
government- affiliated Web sites with code that directs users to attack servers. The most 
recent site to become infected was that of the French budget minister. It was found to 
contain obfuscated Javascript code that sends the user to a third party site and then 
attempts to exploit vulnerabilities and install malware on the targeted system. The 
attack is the latest in what Zscaler sees as a string of site hijackings aimed at 
government-controlled domains. Researchers noted previous attacks on systems in the 
United States, Austria, and Malaysia. Zscaler’s chief executive believes the attacks are 
the work of state-sponsored operations aimed at infecting government workers and 
other high-value targets. A Zscaler security researcher said organizations often leave a 
few of their less popular sites and portals poorly maintained and protected, leaving a 
back door open for attackers. 

Source: http://www.v3.co.uk/v3-uk/news/2169452/hackers-targeting-govemments- 
hijacked-sites 

35. April 20, eSecurity Planet - (California) FBI investigates CSU student for election 
fraud, identity theft. The FBI is investigating a third- year business student at 
California State University San Marcos, for stealing about 700 students’ user IDs and 
passwords to alter the results of an election for student body president, eSecurity Planet 
reported April 20. The student was arrested and jailed March 15 on suspicion of 
election fraud, unlawful access to a computer or database, and identity theft, but posted 
$50,000 bail March 16 and was not charged with a crime. A university spokeswoman 
confirmed April 17 that the school was working with the FBI, and that it locked down 
the 700 accounts and warned the victims their accounts were compromised. Campus 
police found the student in possession of a keystroke logger, which can be used to steal 
computer passwords. 

Source: http://www.esecurityplanet.com/hackers/fbi-investigates-csu-student-for- 
election-fraud-identity-theft.html 

36. April 20, WSB 750 AM Atlanta - (Georgia) Medical college hazmat incident sends 11 
to hospital. Around a dozen people at a surgical training school in Marietta, Georgia, 
were decontaminated and transported to an area hospital after they were overcome by 
fumes April 20. The incident occurred at Everest Institute after a vial containing a 
bonding substance used for surgeries was broken. A spokeswoman said the school was 
evacuated for a time while the area was cleaned. 

Source: http://www.wsbradio.com/news/news/local/rnedical-college-hazmat-incident- 
sends-1 l-hospital/nMdr7/ 

37. April 20, Minneapolis Star Tribune - (Minnesota) Totino-Grace High School 
evacuated after mercury discovered. Totino-Grace High School students were 
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evacuated from the Fridley, Minnesota school April 20, but told to remain on campus 
for nearly 4 hours after mercury from a thermometer was discovered on the floor of a 
science classroom. Eventually, school administrators received clearance from 
emergency personnel that the building was deemed safe and students could return to 
collect their belongings. A HAZMAT team and the Minnesota Pollution Control 
Agency found the mercury was limited to a single classroom and students were not 
affected. It was feared chemicals might be found on students’ shoes. Parents were 
alerted by phone, e-mail, and updates on the school’s Web site. 

Source: http://www.startribune.com/local/148298555.html 
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Emergency Services Sector 

38. April 22, KITV 4 Honolulu - (Hawaii) Man posing as FBI agent on Maui 

arrested. Maui, Hawaii police said officers arrested a man in Kahului April 16 for 
theft, forgery, and impersonating a law enforcement officer. He is accused of 
impersonating an FBI agent to a Maui family. He asked the family to go into their 
home and investigate a “cyber” crime that involved their daughter and a Facebook 
account. The victims gave him the key to their home and, upon returning home, they 
noticed missing items that totaled $1,630; Bank of Hawaii records also show the man 
tried to cash a personal check from the victims in the total amount of $1,000. When 
police arrested him, they found a .38 caliber revolver, a TASER, three air soft 
handguns, two air soft rifles with scopes, two FBI badges, one Maui police badge, a 
hand grenade, ammunition, gunpowder, and FBI and police raid clothing in his home. 
The FBI was notified and responded. The FBI planned to pursue federal charges 
against the man. 

Source: http://www.kitv.com/news/hawaii/Man-posing-as-FBI-agent-on-Maui- 
arrested/-/8905354/l 131 1284/-/h7td00z/-/ 
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Information Technology Sector 

39. April 23, Computerworld - (International) Microsoft yanks Office for Mac 2011 
upgrade. April 20, Microsoft removed a major update for Office for Mac 2011 from its 
upgrade servers, acknowledging bugs that corrupted the Outlook database on some 
machines. Office for Mac 2011 Service Pack 2 (SP2) was released April 12. That same 
day, users who upgraded began reporting problems on Microsoft’s support site, saying 
they were unable to run Outlook, the suite’s e-mail client. April 17, Microsoft 
confirmed the SP2 upgrade could in some cases corrupt the Outlook identity database, 
and offered workarounds to prevent that from happening for those who did not yet 
install the service pack, as well as a step-by-step guide to reconstructing the database 
for those affected by the bug. Three days later, Microsoft took more drastic action, 
shutting down the delivery of Office for Mac 201 1 SP2 through the company’s 
automatic upgrade service. 

Source: 
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http://www.computerwoiid.eom/s/article/9226445/Microsoft yanks Office for Mac 2 
Oil upgrade?source=rss security&utm source=feedbumer&utm medium=feed&utm 
campaign=Feed:+computerworld/s/feed/topic/17-t-(Computerworld+Securitv+News)&u 
tm content=Google+Reader 

40. April 23, H Security - (International) WordPress fixes file upload security 
problems. The developers of the popular open source blog engine WordPress released 
a security update for the software, the H Security reported April 23. WordPress 3.3.2 
fixes unspecified bugs in three external file upload libraries used in the software and 
other security problems with the application. The bugs affect both WordPress ’s current 
file uploading library Plupload as well as the SWFUpload and SWFObject libraries; 
these were bundled with older versions of the application and might still be in use by 
certain plugins on the current versions of WordPress. The developers did not go into 
detail about the specifics of the security holes but thanked three people from the 
WordPress community for responsibly disclosing them. Three more fixes address a 
privilege escalation in the blog engine’s multi-site system and two cross-site scripting 
vulnerabilities in the core components of WordPress. 

Source: http://www.h-online.com/security/news/item/WordPress-fixes-file-upload- 
security-problems-1545416.html 

41. April 23, The Register - (International) Security bug stalls new dot- word TLD land 
grab again. The Internet Corporation for Assigned Names and Numbers (ICANN) was 
forced to delay its new top-level domain (TLD) expansion by another week as its FT 
personnel attempt to analyze the fallout of a security vulnerability. Its TLD Application 
System (TAS), which companies worldwide were using since January to confidentially 
apply for gTLDs was down for 10 days due to a bug that enabled some applicants to 
see information belonging to others. While ICANN maintains it fixed the problem, it 
now says it needs at least another week to sift through all of its TAS logs, to figure out 
which applicants’ data was visible to which other applicants. ICANN received reports 
about the bug since at least March 19, but only issued the delay April 12, just 12 hours 
before the final application submission deadline, when it realized the severity of the 
problem. The organization initially hoped to get the system fixed by April 17, but when 
that deadline passed, it promised to give users an update on the timing by April 20. 
However, that update, which arrived over the the weekend of April 21, only promised 
to provide yet another update before the end of April 27. 

Source: 

http://www.theregister.co.uk/2012/04/23/security bug delays new gtld launch again/ 

42. April 21, Softpedia - (International) Experts find control panel for Ransomlock 
powered ransomware. Ransomware infections have become more popular among 
cybercriminals, and security researchers discovered another trojan that fuels such 
campaigns. The novelty in this scenario is the control panel being utilized in the 
scheme was found. Identified by Symantec as Trojan.Ransomlock.K, the malicious 
element communicates with a command and control server from which it receives 
orders. The interface that allows the cybercrooks to communicate with their trojan is 
called Silent Locker Control Panel and according to experts, it is somewhat similar to 
other control panel used for malware such as Zeus and SpyEye. The Russian variant of 
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Silent Locker offers many options. It tracks the infected computer’s location and date, 
information that can be used for billing. Also based on the location, the cybercriminal 
can choose what picture the ransomware displays when it takes over a computer. If 
notifications that rely on the reputation of a law enforcement agency do not work, the 
fraudsters can turn to fake Windows Security Checks or other scams that may convince 
victims their device is being blocked for performing illegal activities, or even because 
of some phony system errors. While experts have not found a trojan builder for 
Ransomlock.K, they believe the kit most likely comes with one. 

Source: http://news.softpedia.com/news/Experts-Find-Control-Panel-for-Ransomlock- 
Powered-Ransomware-265732.shtml 



43. April 20, Computerworld - (International) Flashback botnet not shrinking, huge 
numbers of Macs still infected. Contrary to reports by several security companies, the 
Flashback botnet is not shrinking, according to the antivirus firm that first reported the 
massive infection 3 weeks ago. Dr. Web, which earlier in April was the first to report 
the largest-ever successful malware attack against Apple’s OS X, said April 20 the pool 
of Flashback-infected Macs still hovers around the 650,000 mark, and infections are 
continuing. Also April 20, the manager of operations at Symantec’s security response 
center confirmed Dr. Web’s numbers were correct. Dr. Web’s tally and its contention 
infections are ongoing flew in the face of other antivirus companies’ assertions. 
Kaspersky Fab and Symantec, which each “sinkholed” select domains — hijacked 
them before hackers could use them to issue orders to compromised machines — used 
those domains to count the Macs that try to communicate with the malware’s 
command-and-control centers. Earlier the week of April 16, Symantec said the botnet 
shrunk to 142,000 machines. April 19, Kaspersky claimed its count registered only 
30,000 infected Macs. 

Source: 

http://www.computerworld.eom/s/article/9226429/Flashbaek botnet not shrinking hu 
ge numbers of Macs still infected 

44. April 20, Inquirer - (International) 100 million users might be affected by a social 
network vulnerability. Do-it-yourself social networking company Ning is reportedly 
suffering from a security problem that could affect 100 million users. Ning lets people 
set up their own social networking channels. According to a Dutch report, a problem 
with its security could leave them wide open to account hijackers. A Dutch Web site 
called Web Wereld said two students exploited cookies to gain log-in control over Ning 
user accounts. They used a proof-of-concept that showed they could access 90,000 
accounts and 100 million users, but had no intention of exploiting it for malicious 
purposes. They did suggest that if others were able to use it, then they could take over 
Ning accounts. The students told Ning about the exploit in March, and since then the 
firm has worked to fix it. 

Source: http://www.theinquirer.net/inquirer/news/2169403/100-million-users-affected- 
social-network-vulnerability 

For more stories, see items 34, 35, and 45 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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45. March 23, The Register - (International) Plumbers of the interwebs vow to kill IP 
hijacking. The Internet Engineering Task Force (IETF) aims to strengthen the basic 
protocols of the Internet, with a way to stop route, or IP, hijacking, The Register 
reported April 23. IETF experts say the proposed fix is simpler to implement than 
previous suggestions. IP hijacking exploits a fundamental weakness of the Internet — 
data and messages sent across the Internet are transmitted via routers, and those routers 
are blindly trusted. No measures are in place to verify if they have been tampered with 
to re-direct or intercept traffic. At an IETF meeting in March, a working group 
proposed a solution that seeks to safeguard the integrity of networking kit. The 
proposal involves publishing preferred routes to sites in DNS records before applying a 
second step, using utilities to verify the instructions are trustworthy. This latter step 
would use DNS Security Extensions, a separate security mechanism being rolled out as 
a defense against cache-poisoning attacks. The whole scheme is called ROVER, or 
BGP Route Origin Verification (via DNS). Rover calls for the use of reverse DNS 
records to periodically publish route announcements, a process that would be done by 
sites themselves, before carrying out real-time verifications of BGP route 
announcements. Rover uses “best effort” data retrieval with worldwide data 
distribution, redundancy, and local caching. If the data is unreachable, the default is 
that routing would proceed as normal but without any checks. 

Source: http://www.theregister.co.uk/2012/04/23/ip hijack prevention/ 

For more stories, see items 39 , 41 , and 44 
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46. April 22, My Everett News - (Washington) Hundreds evacuated after pepper spray 
incident at Everett Regal Cinemas. Hundreds of movie-goers were evacuated from 
the Regal Cinemas Everett in Everett, Washington, after pepper spray was released 
inside a theater April 22. Fire crews were called to the movie theater upon reports of 
something causing irritation to people inside the theater. While the initial call had as 
many as 30 people reportedly bothered by the substance, when Everett fire crews 
arrived, only a few people requested to be checked by medics. A theater employee said 
that the release was caused by a malfunctioning can of pepper spray in the purse of one 
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of the moviegoers. 

Source: http://rrryeverettnews.com/2012/04/22/hundreds-evacuated-after-pepper-spray- 
incident-at-everett-regal-cinemas/ 

47. April 22, WKRC 12 Cincinnati - (Ohio) Police discover meth lab at Blanchester 
apartment complex. An apartment building in Blanchester, Ohio, was evacuated once 
authorities uncovered a methamphetamine lab April 21. Crews were called to the 
building after someone called 911, and then hung up. When officers arrived, they found 
dangerous components used to make meth inside of an apartment. All residents living 
at the apartment building were forced to leave. There was no word as of April 22 on 
when they would be able to return. 

Source: http://www.locall2.com/mostpopular/story/Police-Discover-Meth-Lab-at- 
Blanchester-Apartment/o-S GdSPMEv82Vu90rMmMg.cspx 

48. April 20, WXYZ 7 Detroit - (Michigan) Bed Bug spraying sickens residents at 
apartment building in Detroit. Emergency crews responded to the scene of a 
HAZMAT situation at an apartment building in Detroit, April 20. The building was 
being sprayed for bed bugs, but some of the residents did not leave the building. 
Emergency crews could be seen hosing down individuals and taking residents away by 
ambulance. Officials said that 8-10 people were taken to area hospitals to be treated. 
Source: http://www.wxvz.com/dpp/news/region/detroit/hazmat-situation-at-apartment- 
building-in-detroit 

49. April 20, Fox 29 San Antonio - (Texas) Massive fire destroys northside motel. More 
than 100 firefighters battled a three-alarm fire that destroyed a San Antonio motel April 
20. The fire broke out in a stairwell at the Studio 6 motel, but strong winds quickly 
carried the fire into the third floor, where it engulfed the roof. At one point, part of the 
roof collapsed onto several firefighters, who were all able to get out and escape injury. 
The building was being renovated and was not occupied, though a neighboring building 
had more than 80 guests present. 

Source: http://www.foxsanantonio.com/newsroom/top stories/videos/vid 9997.shtml 

50. April 20, WCAX 3 Vermont - (New York) Fire forces hotel guests to jump from 
balcony. A massive fire at the Hillside Motel in Massena, New York, forced people to 
jump off a second-floor balcony to escape the flames, April 20. Investigators were 
looking into the possibility that someone was smoking while using oxygen. Five motel 
guests were taken to a hospital. Two were airlifted for treatment of bums and severe 
smoke inhalation. 

Source: http://www.wcax.com/story/17627811/fire-forces-hotel-guests-to-jump-from- 
balcony 



For another story, see item 5 



T Return to top ] 



- 18 - 



National Monuments and Icons Sector 



5 1 . April 23, NewsCore - (Utah) 2 arrested for allegedly planting deadly booby traps 
on Utah walking trail. Two men were in custody in Utah after deadly booby traps 
were uncovered along a popular walking trail in Provo Canyon, NewsCore reported 
April 23. The suspects were charged April 21 with reckless endangerment, a 
misdemeanor. A statement issued by the Utah County Sheriffs Office said a U.S. 

Forest Service officer discovered the two booby traps inside a makeshift shelter built 
from dead tree limbs while on foot patrol along the Big Springs walking trail April 16. 
“As he investigated the shelter he noticed what appeared to be a trip wire near the 
ground at an entrance. Upon further investigation he discovered that the trip wire led to 
a booby trap device which was made with a large rock, sticks sharpened at both ends, 
and was held together with rope,” the statement read. “This device was situated in such 
a way that when contact was made with the trip wire it would swing toward an 
unsuspecting hiker or camper,” the statement added. A second booby trap was also 
discovered, also triggered by a trip wire. “This wire was configured so as to trip a 
person, possibly causing them to fall forward onto sharpened sticks placed in the 
ground,” the statement said. Police said the pair confessed to placing the deadly traps in 
the makeshift enclosure. 

Source: http://www.foxnews.com/us/2012/04/23/2-arrested-for-allegedly-planting- 
deadly-booby-traps-on-utah-walking-trail/ 

For another story, see item 6 
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52. April 19, Lancaster Intelligencer Journal; Lancaster New Era - (Pennsylvania) 

Officials say dried-up lake a source of pollution. Warwick Township, Pennsylvania 
supervisors have claimed sediment backed up behind a 46- year-old dam at Speedwell 
Forge lake is running unimpeded down Hammer Creek, carrying phosphorous and 
nitrogen through Lancaster County waterways and toward the fragile Chesapeake Bay 
ecosystem. Warwick Township officials April 18 approved a unanimous resolution 
asking the Pennsylvania Fish & Boat Commission (PFBC) to address the 
environmental concern. Penn and Elizabeth townships, which share the Hammer Creek 
watershed with Warwick, are expected to pass similar resolutions. The PFBC officials 
said the embankment will be breached in July 2012 to address flood risks to 
homeowners downstream, which has local officials worried the flow of sediment will 
increase exponentially. 

Source: http://lancasteronline.com/article/local/630533 Officials-say-dried-up-lake-a- 
source-of-pollution.html 
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